You are a CE marking consultancy managing product conformity for manufacturers of electronics and connected products — WiFi sensors, BLE wearables, Zigbee gateways, LoRa controllers, building automation, smart home devices. Delegated Regulation (EU) 2022/30 activates Article 3(3), points (d), (e) and (f) of Directive 2014/53/EU, requiring cybersecurity documentation for all internet-connected radio equipment. Your clients will ask you to handle it. REDCheck Professional Pack: 70 licenses, €999 one-time. 8 structured PDF documents per product. Generated in your browser in 20 minutes.
€999 · One-time · 70 dossiers · 8 PDFs each · Your data never leaves your browser
You know product conformity. You manage RED, EMC, LVD, and RoHS for dozens of manufacturers. Since August 2025, every internet-connected radio product needs Art. 3.3 cybersecurity documentation on top of existing directives. The question is whether you can deliver it at scale without pulling senior engineers away from RF testing and EMC work.
REDCheck Professional Pack is built for professionals who manage product conformity across multiple directives and need to add Art. 3.3 cybersecurity documentation to their service offering.
Three inputs. Four answers. No signup required.
Every license generates a complete Art. 3.3 cybersecurity documentation package. Each document cites the specific article of Directive 2014/53/EU and Delegated Regulation (EU) 2022/30 it complies with.
Determines which points apply to the product: (d) network protection, (e) privacy and data protection, (f) fraud protection. Based on Delegated Regulation (EU) 2022/30, Articles 1 and 2.
Complete technical file structure for cybersecurity aspects. Product description, design, development methodology. Article 21 of Directive 2014/53/EU.
Art. 3.3(d) — radio equipment does not harm the network or its functioning nor misuse network resources. Aligned with EN 18031-1.
Art. 3.3(e) — safeguards for personal data and privacy of user and subscriber. Aligned with EN 18031-2.
Art. 3.3(f) — features ensuring protection from fraud when the equipment enables monetary transfers. Aligned with EN 18031-3.
Per Annex VI of Directive 2014/53/EU. Manufacturer identification, product identification, applicable essential requirements, conformity assessment reference.
Per Annex VII of Directive 2014/53/EU. Short-form declaration with URL reference to the full Declaration of Conformity. Article 10.9.
Printable label with CE marking, manufacturer contact details, product identification. Articles 19 and 20 of Directive 2014/53/EU.
See before you buy — Download sample dossier (PDF, fictional company) — Real structure, real articles, real format. Fictional data.
RED radio testing documentation (EMC per EN 55032, RF measurements, safety per EN 62368-1) does not map to the cybersecurity requirements of Article 3(3)(d)(e)(f). EN 18031 defines network protection, privacy safeguards, and anti-fraud requirements that have no equivalent in existing directive templates. A conformity assessment built on EMC or safety templates will miss the Art. 3.3 structure entirely.
Delegated Regulation (EU) 2022/30 activated Article 3(3)(d)(e)(f) as separate essential requirements. A product can be fully compliant with RED radio, EMC, and LVD requirements and still have zero cybersecurity documentation. Market surveillance authorities verify Art. 3.3 compliance independently from existing directives.
A CE marking consultancy that cannot offer Art. 3.3 documentation forces the client to find a second provider. That second provider will offer to handle all directives — RED, EMC, LVD, and cybersecurity together. The client leaves not because of price, but because of convenience. Art. 3.3 is a retention risk for the entire service portfolio.
8 structured PDF documents per product. Network protection assessment (Art. 3.3(d)), privacy and data protection assessment (Art. 3.3(e)), anti-fraud assessment (Art. 3.3(f)), Declaration of Conformity, CE marking guidance. Generated from input data in 20 minutes. Article-by-article traceability to Directive 2014/53/EU and Delegated Regulation (EU) 2022/30.
Penetration testing, firmware security analysis, encryption implementation, secure boot configuration, EN 18031 laboratory testing, vulnerability scanning, SBOM generation from source code. These are implementation-level services. REDCheck documents the cybersecurity posture — it does not create it.
REDCheck structures and documents. The consultancy advises on conformity and coordinates implementation. The two layers complement each other.
These are the consequences under Directive 2014/53/EU for radio equipment that does not comply with the essential requirements of Article 3(3). This is the argument to present when a client asks why Art. 3.3 cybersecurity documentation is necessary on top of existing CE marking.
Article 40 of Directive 2014/53/EU. Market surveillance authorities can require corrective measures, withdrawal from the market, or product recall for non-compliant radio equipment.
Article 46 of Directive 2014/53/EU. Member States impose penalties for non-compliance, which may include criminal penalties for serious infringements.
Article 43 of Directive 2014/53/EU. Missing or incomplete technical documentation, absent EU Declaration of Conformity, or improper CE marking triggers formal non-compliance proceedings and prohibition from the market.
The clients face these consequences. The consultancy offers the documentation that prevents them.
| Option | Cost for 70 clients | Total time | Output quality |
|---|---|---|---|
| Manual drafting (Word templates) | Professional time only | 1,050+ hours | Variable, no Art. 3.3-specific structure |
| Outsource to cybersecurity firm | €70,000-€175,000 | Depends on provider | High, but cost-prohibitive at scale |
| Enterprise SaaS platform | €8,000-€20,000/year | 2-4 weeks setup | High, requires integration |
| REDCheck Professional Pack | €999 (one-time) | ~23 hours total | Structured, Art. 3.3(d)(e)(f), article-by-article |
REDCheck generates a structured documentation package covering Article 3(3), points (d), (e) and (f) of Directive 2014/53/EU, as activated by Delegated Regulation (EU) 2022/30, according to Article 21 and Annex V, from the information that the user enters. The truthfulness, accuracy and completeness of that information is the responsibility of the manufacturer — or of the consultant entering data on their behalf.
We guarantee that the document structure follows Annex V of Directive 2014/53/EU and that the legal references cited are correct as of the latest verification date. We do not guarantee that a specific document will be accepted by a market surveillance authority in a specific case, nor by a commercial buyer in a procurement process.
REDCheck is not legal advice. For specific situations, consult a lawyer or specialised regulatory consultancy.
70 licenses. 8 PDF documents per product. Art. 3.3(d)(e)(f) structure. Browser-side. One payment.